This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e2034383437.roa File: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (raw, json) Hash identifier: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg= Subject key identifier: 16:98:14:98:E0:B8:2D:CA:08:AF:94:29:CE:11:C1:86:10:B3:7B:0B Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 57A171950FB5B98CCAA2FD073EFD9150721B7221 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e2034383437.roa Signing time: Tue 20 Jan 2026 02:25:04 +0000 ROA not before: Tue 20 Jan 2026 02:20:04 +0000 ROA not after: Tue 19 Jan 2027 02:25:04 +0000 asID: 4847 IP address blocks: 120.45.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a1:71:95:0f:b5:b9:8c:ca:a2:fd:07:3e:fd:91:50:72:1b:72:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jan 20 02:20:04 2026 GMT Not After : Jan 19 02:25:04 2027 GMT Subject: CN=16981498E0B82DCA08AF9429CE11C18610B37B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:52:3d:b8:4b:52:69:49:0c:37:49:36:df: 67:3f:d3:d7:7a:b2:0b:e1:0b:24:7e:46:c8:a6:35: ca:fe:43:bb:14:d1:05:10:72:39:eb:a2:87:b4:59: 0c:6f:67:75:8a:d7:18:b1:0f:d1:8e:1d:04:85:51: 3e:98:85:20:b4:e6:78:a8:1f:3b:24:24:bc:20:b7: ee:dd:d0:3c:af:d7:c9:d8:96:4b:b8:45:b7:0e:67: 19:76:f1:00:0d:7a:c7:df:e0:e5:db:78:1d:44:e0: 84:ca:cb:fe:48:d6:89:d9:8b:50:a3:9a:85:c1:9e: c7:59:e2:fb:09:bc:eb:05:5f:81:98:ce:be:23:31: 04:f1:bc:05:14:e7:81:a1:82:b4:3a:b9:08:ae:e3: c7:3c:c1:09:17:7d:af:9c:be:45:79:a0:1c:30:14: 0f:a6:62:08:f0:d9:39:d1:03:71:20:fd:03:ce:d1: bd:3f:25:d2:e0:aa:6e:fe:2f:be:1b:ea:e8:65:0a: 14:6c:db:c3:f2:5a:c6:df:90:b5:f5:4f:74:97:85: 3f:10:31:1c:26:52:0e:ad:78:6a:50:3a:28:03:86: 4b:79:42:50:95:94:fd:e5:ef:5f:f4:32:22:a1:66: 94:72:52:88:ea:7b:9e:ac:83:87:0a:3b:7b:c7:9b: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:98:14:98:E0:B8:2D:CA:08:AF:94:29:CE:11:C1:86:10:B3:7B:0B X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.45.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1d:f6:fe:00:e9:4c:37:12:cb:e8:6b:5f:cd:2b:29:78:49:a6: fe:0b:fe:b1:96:42:56:f7:3d:ba:f7:d7:62:bd:4a:7c:a9:b1: 5c:cb:97:82:2b:04:36:46:f1:52:3b:21:b8:8f:27:f0:a6:41: 7c:bc:bc:c6:3f:2a:48:6a:6a:86:eb:61:79:7a:d4:5e:28:71: 97:81:68:7c:33:c0:1f:e4:7a:78:1c:62:b2:31:28:d7:fc:3e: 42:54:c5:e0:fc:cc:54:79:97:ff:23:65:61:ce:df:5a:d5:93: a6:fd:ad:6c:9f:ab:2c:1a:44:14:c9:35:7f:63:10:2a:ff:01: 8a:8b:94:20:95:12:21:d0:9c:7c:c9:b2:30:d8:c7:c3:c7:7c: 75:20:62:6a:26:fd:73:f2:5a:ea:da:e0:68:31:e5:4a:d1:63: dc:0f:0a:bf:c1:08:62:cb:54:98:f9:19:ec:ea:e8:95:dc:08: 97:61:5a:1d:bc:7e:f1:1b:a6:46:26:d0:68:70:7c:3e:4d:a0: 17:67:0e:fe:2e:b1:db:e6:24:8d:db:26:72:4c:e3:69:4e:df: ef:cb:83:bd:b1:9f:98:f5:bf:2d:60:a7:f2:7e:07:8f:45:52: 1f:25:e6:98:b6:7e:51:03:7b:a4:cc:d1:2a:e4:ef:1a:f1:80: 1f:8f:5e:b3 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUV6FxlQ+1uYzKov0HPv2RUHIbciEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjAxMjAwMjIwMDRaFw0yNzAxMTkwMjI1MDRaMDMxMTAvBgNV BAMTKDE2OTgxNDk4RTBCODJEQ0EwOEFGOTQyOUNFMTFDMTg2MTBCMzdCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDL1I9uEtSaUkMN0k232c/09d6 sgvhCyR+RsimNcr+Q7sU0QUQcjnrooe0WQxvZ3WK1xixD9GOHQSFUT6YhSC05nio HzskJLwgt+7d0Dyv18nYlku4RbcOZxl28QANesff4OXbeB1E4ITKy/5I1onZi1Cj moXBnsdZ4vsJvOsFX4GYzr4jMQTxvAUU54GhgrQ6uQiu48c8wQkXfa+cvkV5oBww FA+mYgjw2TnRA3Eg/QPO0b0/JdLgqm7+L74b6uhlChRs28PyWsbfkLX1T3SXhT8Q MRwmUg6teGpQOigDhkt5QlCVlP3l71/0MiKhZpRyUojqe56sg4cKO3vHm+CZAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUFpgUmOC4LcoIr5QpzhHBhhCzewswHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM1 MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzgzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA eC0wDQYJKoZIhvcNAQELBQADggEBAB32/gDpTDcSy+hrX80rKXhJpv4L/rGWQlb3 Pbr312K9SnypsVzLl4IrBDZG8VI7IbiPJ/CmQXy8vMY/KkhqaobrYXl61F4ocZeB aHwzwB/kengcYrIxKNf8PkJUxeD8zFR5l/8jZWHO31rVk6b9rWyfqywaRBTJNX9j ECr/AYqLlCCVEiHQnHzJsjDYx8PHfHUgYmom/XPyWura4Ggx5UrRY9wPCr/BCGLL VJj5Gezq6JXcCJdhWh28fvEbpkYm0GhwfD5NoBdnDv4usdvmJI3bJnJM42lO3+/L g72xn5j1vy1gp/J+B49FUh8l5pi2flEDe6TM0Srk7xrxgB+PXrM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:37:57 2026 by rpki-client